Add Optional IAM Role Name Variable about terraform-aws-vault HOT 2 OPEN

I'm definitely down with using the module's output variables to programmatically get at the role ARN when appropriate. To clarify the issue's description:

• It isn't a matter of the role name being unknown post-deploy, its a matter of the ARN not being known before invoking terraform apply.
• Additionally, it is conceivable that the role ARN would change on subsequent deployments. For instance, if the cluster_name variable was modified.

That said, this issue was filed to ensure the idea wasn't completely misguided (and to abide by per the repo's contributing guidelines). I totally intend to try my hand at a PR for this fella! 😅

from terraform-aws-vault.

The module does return the IAM ARN info as output variables, so you shouldn't have to hard-code them: https://github.com/hashicorp/terraform-aws-vault/blob/master/modules/vault-cluster/outputs.tf#L21-L27.

That said, this feature would likely be useful for a number of reasons, so I'm in favor of it. It should be straightforward to add an iam_role_name input variable, set to an empty string by default, and to name the IAM role using that variable if it's non-empty or var.name otherwise.

PRs welcome!

from terraform-aws-vault.